27 lines
970 B
Diff
27 lines
970 B
Diff
From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
|
|
From: Anonymous <anonymous@electronjs.org>
|
|
Date: Thu, 20 Sep 2018 17:46:43 -0700
|
|
Subject: thread_capabilities.patch
|
|
|
|
Chromium automatically drops all capabilities of renderer threads in
|
|
Linux, which may cause issues in a context like Electron, where the main
|
|
and renderer threads are supposed to keep inherited permissions over the
|
|
system.
|
|
|
|
See https://github.com/atom/electron/issues/3666
|
|
|
|
diff --git a/sandbox/linux/services/credentials.cc b/sandbox/linux/services/credentials.cc
|
|
index ee0fa017409099bf4574a8c7aa4fbb0f53ed07c2..aeec2cb89b23f80997c9d5f195f099d95fa6068b 100644
|
|
--- a/sandbox/linux/services/credentials.cc
|
|
+++ b/sandbox/linux/services/credentials.cc
|
|
@@ -348,8 +348,10 @@ pid_t Credentials::ForkAndDropCapabilitiesInChild() {
|
|
return pid;
|
|
}
|
|
|
|
+#if 0
|
|
// Since we just forked, we are single threaded.
|
|
PCHECK(DropAllCapabilitiesOnCurrentThread());
|
|
+#endif
|
|
return 0;
|
|
}
|
|
|